Thanx everybody for the responses. R1. I'll have to see what the databasemirror will do. I tried to run freshclam with database.clamav.net and that worked but as there were no updates I'll have to wait to see what happens if there are updates. I remembered it had run perfectly once or twice in the past.
R2. I guess we'll be running our current virus scanner next to clamav until the macro issue is solved in the future version of clamav. That is if we get approval for clamav. Right now, I'm of for a week so after that week I'll be knowing more, I hope :) Greetz Peter >>> [EMAIL PROTECTED] 12-03-2004 12:46:20 >>> On Fri, 12 Mar 2004 15:56:17 +0700 "Fajar A. Nugraha" <[EMAIL PROTECTED]> wrote: > >Q2. > >I just read the UpdateDB mail: > >Submission: 1890 > >Sender: Dirk Mueller > >Submitted virus name: WM97/Outblack-A > >Virus name: WM97.Outblack.A > >Virus name alias: IRC-Worm.Blackput (kaspersky) > >Note: Latest CVS version of ClamAV is required to detect > >Note: the macro viruses. > >Added: Yes > > > >Does this mean our version of clamav doesn't detect macro viruses at > >all? > > > I think so. Well, it detects some macro viruses but the signatures were created against binary documents and are not optimal. New versions of clamav are able to decompress all macros from office files. -- oo ..... Tomasz Kojm <[EMAIL PROTECTED]> (\/)\......... http://www.ClamAV.net/gpg/tkojm.gpg \..........._ 0DCA5A08407D5288279DB43454822DC8985A444B //\ /\ Fri Mar 12 12:43:51 CET 2004 ------------------------------------------------------- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
